GHSA-4q2q-q5pw-2342

ghsaUSosv

Apache Airflow Apache Hive Provider Improper Input Validation vulnerability

view advisory published 2023-07-13Licence: CC-BY-4.0

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 Before 6.1.2 the proxy_user option can also inject semicolon. This issue affects Apache Airflow Apache Hive Provider: before 6.1.2. It is recommended updating provider version to 6.1.2 in order to avoid this vulnerability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-37415US	high8.8	1.59% (76th)	—	2023-07-13
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 Before 6.1.2 the proxy_user option can…

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan